<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>Greetings,<br><br>Seeking advise on how to debug a recurring problem - charon appears to be frozen.<br><br>Symptoms:<br>---------<br>- Tunnels already established remained operational but no new connection accepted. We verified with tcpdump that connection requests arrive at the box (a Vyatta VM) but /var/log/messages showed no charon activity.<br>- Log level: knl=2, ike=2. Up to point of failure log file had lots of entry like this:<br>charon: 10[KNL] querying policy 10.113.253.0/24 === 0.0.0.0/0 in <br>- After the failure point no charon entries in the log file at all. Only entries from pam_unix and ntpd.<br>- Our remote peers are mobile and switch networks as they move around. Because no new connection could be setup, eventually all tunnels were down.<br>- OS seemed to be in good shape. Could login, run tcpdump, view
logs, check ipsec status, top, ps aux, df etc, all normal.<br>- I was told that ipsec restart did not fix problem. Rebooting the VM fixed it.<br>- This problem happened 3 times so far. Last time was 3 weeks ago.<br><br>The environment:<br>------------------<br>- Virtual Machine running Debian 5.0.4, 4G RAM (no mistake !), 2.6.32 kernel<br>- Disk usage is 25% of 4G<br>- Strongswan 4.3.2, both charon and pluto running. All connections are IKEv2.<br>- Total 40 tunnels, half were active when incident occurred.<br>- We use Mobike.<br><br>Anyone know what may cause this problem in 4.3.2? Any advise how to debug this? What other log type (cfg, job, chld etc) should I turn on? <br><br>Appreciate your help.<br>sc<br><br></div></div></body></html>